PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protocol to invoke internal functions. However, this Named Pipe is misconfigured, allowing any authenticated local user to execute arbitrary code with NT AUTHORITY\SYSTEM privileges and to delete arbitrary files with SYSTEM privileges. By leveraging this, an attacker can execute arbitrary code on the target system with elevated privileges.
Fix
Public exploits 1
- S1eezer/CVE-2026-8069 PoC on GitHub
Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.
Patch, vendor advisory and mitigation references on NVD 1
- https://community.acer.com/en/kb/articles/19652 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 8.5 · acerNVD modified 2026-10-26 19:10
Affected (CPE criteria) 2
cpe:2.3:a:acer:nitrosense:*:*:*:*:*:*:*:*cpe:2.3:a:acer:predatorsense:*:*:*:*:*:*:*:*
References 1
- https://community.acer.com/en/kb/articles/19652 Vendor Advisory